17 St. 7 Min, 12 Mai 2018 Jahr - RCE in Signal messaging app

Beschreibung:

https://thehackernews.com/2018/05/signal-messenger-vulnerability.html

Security researchers have discovered a severe vulnerability in the popular end-to-end encrypted Signal messaging app for Windows and Linux desktops which could allow remote attackers to execute malicious code on recipients system just by sending a message—without requiring any user interaction.
Discovered by Alfredo Ortega, a software security consultant from Argentina, the vulnerability was announced on Twitter just a few hours ago with a proof-of-concept video, demonstrating how a javascript payload sent over Signal for desktop app successfully got executed on the recipient's system.

Zugefügt zum Band der Zeit:

Datum: